Vulnerabilities (CVE)

Filtered by CWE-89
Total 16884 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-31350 1 Online Car Wash Booking System Project 1 Online Car Wash Booking System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/manage_vehicle.php?id=.
CVE-2022-31348 1 Online Car Wash Booking System Project 1 Online Car Wash Booking System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/update_status.php?id=.
CVE-2022-31347 1 Online Car Wash Booking System Project 1 Online Car Wash Booking System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle.
CVE-2022-31346 1 Online Car Wash Booking System Project 1 Online Car Wash Booking System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_service.
CVE-2022-31345 1 Online Car Wash Booking System Project 1 Online Car Wash Booking System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manage_user&id=.
CVE-2022-31344 1 Online Car Wash Booking System Project 1 Online Car Wash Booking System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_booking.
CVE-2022-31343 1 Online Car Wash Booking System Project 1 Online Car Wash Booking System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/view_details&id=.
CVE-2022-31340 1 Simple Inventory System Project 1 Simple Inventory System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.
CVE-2022-31339 1 Simple Inventory System Project 1 Simple Inventory System 2024-11-21 6.5 MEDIUM 7.2 HIGH
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php.
CVE-2022-31338 1 Online Ordering System Project 1 Online Ordering System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=.
CVE-2022-31337 1 Online Ordering System Project 1 Online Ordering System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=.
CVE-2022-31336 1 Online Ordering System Project 1 Online Ordering System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php.
CVE-2022-31335 1 Online Ordering System Project 1 Online Ordering System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=.
CVE-2022-31329 1 Online Ordering System Project 1 Online Ordering System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php.
CVE-2022-31328 1 Online Ordering System Project 1 Online Ordering System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=.
CVE-2022-31327 1 Online Ordering System Project 1 Online Ordering System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=.
CVE-2022-31325 1 Churchcrm 1 Churchcrm 2024-11-21 6.5 MEDIUM 7.2 HIGH
There is a SQL Injection vulnerability in ChurchCRM 4.4.5 via the 'PersonID' field in /churchcrm/WhyCameEditor.php.
CVE-2022-31296 1 Online Discussion Forum Project 1 Online Discussion Forum 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/view_post.php.
CVE-2022-31181 1 Prestashop 1 Prestashop 2024-11-21 N/A 9.8 CRITICAL
PrestaShop is an Open Source e-commerce platform. In versions from 1.6.0.10 and before 1.7.8.7 PrestaShop is subject to an SQL injection vulnerability which can be chained to call PHP's Eval function on attacker input. The problem is fixed in version 1.7.8.7. Users are advised to upgrade. Users unable to upgrade may delete the MySQL Smarty cache feature.
CVE-2022-31101 1 Prestashop 1 Blockwishlist 2024-11-21 6.5 MEDIUM 8.1 HIGH
prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are no known workarounds for this issue.